Looks like some Windows Server 2016 events are not parsing correctly - there may be more that aren't parsing that may not be enabled on our servers. These events are all related to group enumeration which would be great events to collect.
Hoping Andy can channel this through internal channels
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.